Log in Start free

Vulnerability · Published Nov 11, 2025 · Assigned by microsoft

CVE-2025-30398Nuance PowerScribe 360 Information Disclosure Vulnerability

High 8.1

In plain English

A high-severity missing authorization in Nuance PowerScribe 360 version 4.0.1 from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.8%top 41.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.

Affected products (as reported)

VendorProductVersions
Microsoft Nuance PowerScribe 360 version 4.0.1 4.0.1 – before 7.0.111.66
Microsoft Nuance PowerScribe 360 version 4.0.2 4.0.2 – before 7.0.154.16
Microsoft Nuance PowerScribe 360 version 4.0.3 4.0.3 – before 7.0.197.8
Microsoft Nuance PowerScribe 360 version 4.0.4 4.0.4 – before 7.0.212.9
Microsoft Nuance PowerScribe 360 version 4.0.5 4.0.5 – before 7.0.243.17
Microsoft Nuance PowerScribe 360 version 4.0.6 4.0.6 – before 7.0.277.26
Microsoft Nuance PowerScribe 360 version 4.0.7 4.0.7 – before 7.0.316.9
Microsoft Nuance PowerScribe 360 version 4.0.8 4.0.8 – before 7.0.427.13
Microsoft Nuance PowerScribe 360 version 4.0.9 4.0.9 – before 7.0.528.18
Microsoft Nuance PowerScribe One version 2019.1 2019.1 – before 2019.1.96.5
Microsoft Nuance PowerScribe One version 2019.10 2019.10 – before 2019.10.36.4
Microsoft Nuance PowerScribe One version 2019.2 2019.2 – before 2019.2.9.8
Microsoft Nuance PowerScribe One version 2019.3 2019.3 – before 2019.3.16.20
Microsoft Nuance PowerScribe One version 2019.4 2019.4 – before 2019.4.9.16
Microsoft Nuance PowerScribe One version 2019.5 2019.5 – before 2019.5.14.39
Microsoft Nuance PowerScribe One version 2019.6 2019.6 – before 2019.6.36.39
Microsoft Nuance PowerScribe One version 2019.7 2019.7 – before 2019.7.107.21
Microsoft Nuance PowerScribe One version 2019.8 2019.8 – before 2019.8.43.15
Microsoft Nuance PowerScribe One version 2019.9 2019.9 – before 2019.9.31.19
Microsoft PowerScribe One version 2023.1 SP2 Patch 7 2023.1 – before 2023.2.3027.0

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

References